105 matches found
CVE-2022-38615
SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...
CVE-2022-38619
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /SVFE2/pages/feegroups/mccgroup.jsf...
CVE-2022-38616
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...
CVE-2022-38614
An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter...
CVE-2022-35554
Multiple reflected XSS vulnerabilities occur when handling error message of BPC SmartVista version 3.28.0 allowing an attacker to execute javascript code at client side...
EUVD-2018-7086
Malware in sbrugna...
EUVD-2018-7085
Malware in sbrugna...
EUVD-2018-7084
Malware in sbrugna...
EUVD-2022-41195
Malicious code in bioql PyPI...
EUVD-2022-41190
Malicious code in bioql PyPI...
EUVD-2022-38440
Malicious code in bioql PyPI...
EUVD-2022-41191
Malicious code in bioql PyPI...
EUVD-2022-41193
Malicious code in bioql PyPI...
EUVD-2022-41192
Malicious code in bioql PyPI...
EUVD-2022-41196
Malicious code in bioql PyPI...
EUVD-2022-41194
Malicious code in bioql PyPI...
CVE-2025-50255
Cross Site Request Forgery CSRF vulnerability in Smartvista BackOffice SmartVista Suite 2.2.22 via crafted GET request...
CVE-2025-50255
Cross Site Request Forgery CSRF vulnerability in Smartvista BackOffice SmartVista Suite 2.2.22 via crafted GET request...
CVE-2025-50255
Cross Site Request Forgery CSRF vulnerability in Smartvista BackOffice SmartVista Suite 2.2.22 via crafted GET request...
PT-2025-38415
Name of the Vulnerable Software and Affected Versions Smartvista BackOffice SmartVista Suite version 2.2.22 Description The software contains a Cross Site Request Forgery CSRF flaw. A crafted GET request can trigger the flaw. Recommendations Apply any available updates to address the issue in...